2017-04-19 14:12:47 -07:00

1.2 KiB

title, description, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, author
title description ms.pagetype ms.prod ms.mktglfcycl ms.sitesec author
5039(-) A registry key was virtualized. (Windows 10) Describes security event 5039(-) A registry key was virtualized. security w10 deploy library Mir0sh

5039(-): A registry key was virtualized.

Applies to

  • Windows 10
  • Windows Server 2016

This event should be generated when registry key was virtualized using LUAFV.

This event occurs very rarely during during standard LUAFV registry key virtualization.

There is no example of this event in this document.

Subcategory: Audit Registry

Event Schema:

A registry key was virtualized.

Subject:

Security ID:%1%

Account Name:%2

Account Domain:%3

Logon ID:%4

Object:

Key Name:%5

Virtual Key Name:%6

Process Information:

Process ID:%7

Process Name%8

Required Server Roles: None.

Minimum OS Version: Windows Server 2008, Windows Vista.

Event Versions: 0.

Security Monitoring Recommendations

  • There is no recommendation for this event in this document.